Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: HpwqygAFM+KsvyouYyO/rDmskRp4/4Bku4CTubz90Gw=
Subject key identifier: 1F:F7:5E:35:35:A6:36:1E:FB:E6:2D:BF:36:6B:DC:21:54:36:D8:FF
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 01A11A877218094FC0F4E2904493961B0F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 1A98
Signing time: Thu 08 Oct 2026 08:00:46 +0000
Manifest this update: Thu 08 Oct 2026 08:00:46 +0000
Manifest next update: Fri 09 Oct 2026 08:00:46 +0000
Files and hashes: 1: AMtRKXkFFUuu-FBFySOQZFh0CVc.asa (hash: m8zsToffrsGJPD49WuP8tnJc1KNywcrURjmTcAwvTds=)
2: GBd4rVL5dJN0-9cuwhBBwNEyoV0.roa (hash: iRjXs3gr4L7byQxpcKRUar4Pisuwylgwnacqi0QdLQQ=)
3: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (hash: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8=)
4: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: 8EYm7qQ9ZRKKL2bIAind1D9XGi5hPbACdw+zkAE8RTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:72:18:09:4f:c0:f4:e2:90:44:93:96:1b:0f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Oct 8 08:00:46 2026 GMT
Not After : Oct 9 08:00:46 2026 GMT
Subject: CN=1ff75e3535a6361efbe62dbf366bdc215436d8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:1e:a4:c5:7d:c3:98:05:81:99:52:05:bd:
9d:e2:c5:6c:82:78:60:7a:48:41:0f:1a:63:10:a4:
c7:8c:62:cc:26:4b:a5:9b:8f:d4:6a:61:a4:33:42:
f7:44:9c:62:f3:b9:41:ab:c7:ef:56:6d:ce:b8:c9:
96:47:ca:51:05:49:44:65:34:0a:e4:51:b4:1b:6b:
f3:e0:f0:73:74:f4:b7:12:58:f3:2d:40:b1:a5:a9:
b1:0b:de:fe:95:83:e0:69:b4:cf:a7:fe:5c:b2:e6:
25:ca:54:f0:c8:c8:bd:74:bf:c5:64:f5:c2:6f:9e:
25:62:4f:bb:34:3e:67:03:72:9d:c5:1d:1d:1d:4e:
40:86:4f:7b:9d:9e:68:44:9e:6a:07:a4:90:9a:e5:
3b:92:f7:81:da:5f:73:39:a7:97:da:54:0f:5d:19:
e3:0b:52:18:7c:80:93:0f:2a:dc:6c:4f:7c:a6:85:
6c:8e:a2:f5:b5:a1:a5:59:ce:5e:e8:41:b5:fa:86:
d0:16:9a:19:f6:f0:f5:c4:b5:a7:b4:33:16:cd:25:
0e:90:eb:5e:97:78:0f:e4:90:4d:8a:55:8b:07:ca:
61:67:48:74:96:e7:db:f2:d3:bd:60:25:e6:31:5a:
ef:0d:fa:34:36:c0:a9:b1:ad:b3:16:54:7b:19:76:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:5E:35:35:A6:36:1E:FB:E6:2D:BF:36:6B:DC:21:54:36:D8:FF
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d3:12:2b:be:64:14:bc:35:09:7f:10:22:ee:30:3d:42:d9:
6b:ae:a8:01:7a:76:dd:13:e2:0d:66:1f:c0:2b:60:be:7a:18:
2b:d1:7c:63:ce:91:92:2a:5a:60:e6:ef:fe:93:27:31:26:ac:
5a:77:a1:16:21:cf:0d:cf:ef:4c:36:d7:60:51:0a:0c:34:76:
d5:c5:3e:91:bc:b2:28:b2:7e:ad:f3:8a:5d:02:9b:d8:60:e9:
e1:74:1a:e4:1b:1d:b9:cc:db:c0:3d:b9:06:3f:13:94:6c:c0:
02:01:35:e9:45:d0:27:da:3d:d3:4d:f0:4b:6b:f3:ac:57:2c:
38:f2:5e:36:91:55:07:37:fa:95:c8:4e:c7:03:c3:83:1f:15:
9e:4a:62:f4:20:48:01:a3:e7:6c:7f:c9:38:7f:7d:12:a8:fe:
7c:0f:ae:63:c1:db:de:77:47:18:ef:73:25:c8:0a:5b:26:06:
99:ba:05:a9:4b:4d:7a:ae:90:3a:fc:ab:5d:cb:a0:de:dc:1f:
69:1d:18:b4:0b:f3:72:1c:a2:34:78:cd:46:1c:42:c1:f4:2f:
d1:75:72:d4:9f:f2:88:08:85:e9:6d:cb:e4:c0:17:80:d7:f9:
81:0c:f0:84:5f:91:83:c2:10:42:97:68:f4:bc:0d:80:1b:9b:
e6:ec:13:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:43:47 2026 by rpki-client